Or they could train a network to recognize persons likely to try and poison their data sets and use it as an exclusion. You could go on to argue that those persons could also poison that data, but then they could handle it in a similar way. This goes process could theoretically go on ad infinitum.